New tools, products, platforms, funding rounds, and company developments in AI security.
OpenAI has partnered with two major Brazilian news organizations, Folha de S.Paulo and Grupo UOL, to integrate their journalism into ChatGPT. Starting immediately, ChatGPT's 900 million weekly active users can access summaries and articles from these sources with attribution and links back to the original reporting. This partnership is part of OpenAI's broader effort to work with news publishers globally and bring trusted journalism into AI-powered experiences.
UK companies are misrepresenting themselves as AI specialists by exaggerating or relabeling their ordinary automation systems as artificial intelligence to gain attention and investment. PR executives report that bosses across low-tech industries are pressuring them to pitch their businesses as AI companies, even when they only use basic automation rather than generative AI (AI systems that can create text, images, or other content).
At the Cannes Film Festival, director Darren Aronofsky defended the use of generative AI (software that creates new content like images or text from patterns in training data) in filmmaking through his studio Primordial Soup, while facing criticism from peers like Guillermo del Toro who oppose the technology. The article highlights that AI has become a deeply divisive issue within the film industry, with significant disagreement over whether filmmakers should adopt these tools.
President Trump reversed his plan to require a government safety review of new AI models before their release, deciding instead that the US government would not slow down AI development. The reversal happened hours before the executive order was set to be signed, and Trump cited American competitiveness and competition with China as reasons for prioritizing speed over safety reviews despite expert warnings about security risks.
Google's Gemini AI model can generate realistic videos from simple inputs, as demonstrated by an experiment where someone created deepfake (synthetic media made to look real) videos of a stuffed animal. The article highlights how accessible and effective these video generation tools have become, raising questions about the line between harmless creative use and potentially misleading AI-generated content.
Google accidentally published working exploit code for an unfixed vulnerability in Chromium (the open-source foundation for Chrome, Edge, and other browsers) that was originally reported 42 months earlier. The bug allows websites to install a persistent service worker (background code that runs on your device) that could monitor your browsing, redirect your traffic, or use your computer in DDoS attacks (large-scale coordinated attacks that overload servers).
This article reports on US political news regarding personnel changes in the intelligence community, specifically the resignation of the national intelligence director and appointment of a replacement. The content focuses on political developments and does not discuss any AI, cybersecurity, or technology-related issues.
According to a Reuters report, Grok (Elon Musk's AI chatbot) is not performing well and has minimal adoption, appearing in only 3 out of over 400 documented cases of U.S. government AI use, and only for basic tasks like document drafting or social media management. This low usage is a sign of trouble for xAI's flagship product, despite Musk's plans to make it central to a major financial offering.
A story selected for a prestigious British literary award appears to have been written by an LLM (large language model, an AI trained on text to generate human-like writing) rather than by a human author, raising concerns about how the literary world will handle AI-generated submissions. The story exhibits characteristic patterns of AI-generated text, such as repetitive sentence structures and predictable phrasing.
Spotify has partnered with Universal Music Group (UMG) to create a new tool that uses generative AI (AI that creates new content from patterns in training data) to let users make remixes and covers of songs from UMG's music catalog. The article expresses concern that this tool will make it even easier to flood the internet with AI-generated music covers, which already appear widely on platforms like YouTube, TikTok, and Instagram.
Between December 2025 and February 2026, a single attacker compromised nine Mexican government agencies using AI as the core tool to carry out the entire attack, rather than just a helper tool. The attacker accessed sensitive data including tax records, civil registry information, patient files, and electoral systems, and researchers only discovered the breach after finding materials on the attacker's servers.
SpaceX, OpenAI, and Anthropic are planning major initial public offerings (IPOs, where companies sell shares to the public for the first time) in 2026, with SpaceX targeting a $1.75 trillion valuation. However, analysts warn these mega-cap floats resemble the late-1990s dot-com bubble, noting that all three companies are unprofitable and have opaque business models, with SpaceX's only profitable division being its Starlink internet service while its AI and space divisions operate at significant losses.
SpaceX released a 300+ page investor document (prospectus, which outlines a company's finances and plans to potential investors) as part of its plan to go public on the US stock market, revealing financial details and various risk warnings about the company's ambitious plans. The document includes unusual disclosures that reflect Elon Musk's vision for space exploration and shows how interconnected his different businesses are with each other.
Google is integrating CodeMender, an AI agent that automatically finds and fixes software vulnerabilities, into its larger Agent Platform ecosystem rather than keeping it as a standalone tool. CodeMender uses Gemini reasoning models (advanced AI that can think through complex problems) to analyze code vulnerabilities, generate fixes, and test them before showing them to developers. This shift suggests Google believes enterprises want autonomous security tools embedded within a governed infrastructure framework with identity and monitoring systems, rather than as isolated products.
Scotland's policy encouraging "green datacentres" (facilities designed to minimize environmental impact) was created in 2022 before AI tools like ChatGPT became widespread, and a Scottish charity warns it may not account for the significant carbon emissions that AI systems actually produce. The policy is meant to attract AI investment to Scotland as part of the country's economic development strategy, but it appears outdated regarding the true environmental costs of running AI.
Early AI chatbots were vulnerable to jailbreaks, which are attacks where users trick the AI into ignoring its safety guidelines by simply asking it to do so, requiring no technical expertise or coding knowledge. Hackers are now becoming more sophisticated in exploiting chatbot personalities to bypass safety measures that were built into these expensive AI systems.
Anthropic's Project Glasswing uses Claude Mythos Preview, an advanced AI model, to automatically find security flaws (vulnerabilities) in widely-used software before attackers can exploit them. Since launching last month, the program has identified over 10,000 high-severity vulnerabilities across critical software, with 97 already patched and 88 security advisories issued. However, Anthropic notes that finding vulnerabilities is much easier than fixing them, presenting a major challenge for cybersecurity.
Fix: Anthropic recommends that software developers and network defenders shorten their patch cycles and deployment timelines. Specific steps mentioned include: hardening networks' default configurations, enforcing multi-factor authentication (requiring two or more ways to verify identity), and keeping comprehensive logs for detection and response. Additionally, Anthropic launched a Cyber Verification Program that allows security professionals to use its models without safety restrictions for legitimate purposes such as vulnerability research, penetration testing, and red teaming (simulated attacks by friendly security experts).
The Hacker NewsMicrosoft is testing agentic AI (AI that can perform multi-step tasks automatically) in its Edge for Business browser to help employees complete routine work like filling forms and gathering information across tabs. A key focus is protecting corporate data through features that keep AI prompts within the company's Microsoft 365 tenant (a private cloud environment), prevent copy-paste operations, block sensitive uploads, and allow companies to audit what users do.
Fix: Microsoft provides several data protection features in Edge for Business: enterprises can block copy and paste functionality, ensure all AI prompts and responses stay within their Microsoft 365 tenant (preventing use for model training), enable audit capabilities for prompts, and use the Purview compliance tool to analyze file uploads and detect sensitive data to block risky actions. These protections are active as soon as users sign into Edge for Business.
CSO OnlineAt Anthropic's developer event, nearly half the attendees reported shipping code written entirely by Claude (an AI assistant), with many not reading it first before deploying it live. The article discusses how AI coding tools are becoming increasingly capable and how developers are automating their work, though not everyone agrees this approach is beneficial.
AI security strategies often fail in operational technology (OT) environments, like power plants and factories, because critical legacy systems don't send data to AI systems—a maintenance laptop running unpatched Windows 7 is common. AI trained on typical IT data (like web traffic logs) often misclassifies normal industrial traffic as threats, and automated responses can accidentally shut down production lines faster than actual attacks, because in OT systems availability (keeping things running) is more important than the IT security priorities of confidentiality and integrity.